Common warning signs
- The sender domain does not match the company being represented
- A sudden request to change bank details or use a third-party beneficiary
- Extreme urgency used to bypass normal verification
- Refusal to provide verifiable company, order or identity information
- Broad requests for quotations, catalogs or sensitive documents without a clear purchasing need
Confirm payment changes
For any new beneficiary, payment instruction or contract change, confirm through an existing trusted channel rather than relying on one message or one chat account.
Keep records
Retain full email headers, domains, payment instructions, contract versions and chat records. Complete records make later verification easier.